How to configure Bro to listen on multiple interfaces

Hello Bro,

I have been researching the net and cannot find a clear way for my scenario.

I have bro in standalone mode, it has been running but now we added another nic to bro and want Bro to monitor on that nic as well keeping it in standalone mode.

How can I make this happen, please can one how me what and where I need to make changes ?

Respectfully Yours

Charles McKee

DecisivEdge**, LLC**

O: 302.299.1570 x432 | C: 302.320.6968 | F: 302.299.1578

131 Continental Dr | Suite 409 | Newark, DE 19713

charles.mckee@decisivedge.com | www.DecisivEdge.com

Assuming you're using broctl,
add:

broargs = -i eth2 
 to your broctl.cfg file

Patrick Kelley, CISSP, C|EH, ITIL
Principal Security Engineer
patrick.kelley@criticalpathsecurity.com